Description
Laravel中存在远程代码执行漏洞，此漏洞是由于PendingBroadcast.php中的__destruct方法可控导致的。
Laravel CVE-2022-31279 远程命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2022-31279
https://avd.aliyun.com/detail?id=AVD-2022-31279
https://www.cnvd.org.cn/flaw/show/CNVD-2022-44351
https://github.com/advisories/GHSA-vv7q-mfpc-qgm5
https://security.snyk.io/vuln/SNYK-PHP-LARAVELFRAMEWORK-2863117
https://www.miggo.io/vulnerability-database/cve/CVE-2022-31279
https://dbugs.ptsecurity.com/vulnerability/PT-2022-20661
https://blog.lexfo.fr/laravel-debug-rce.html
https://www.zongscan.com/demo333/95832.html
https://todis21.github.io/2023/08/02/Laravel%E6%BC%8F%E6%B4%9E%E5%90%88%E9%9B%86/